>On 01-08-23 19.34, "Cerebus the Aardvark" <[EMAIL PROTECTED]> wrote:
>
>> How is that a bug? The passwords are stored in cleartext in the
>> resource fork anyway. If someone has access to your machine to see
>> the logs they certainly have access to the passwords.
>
>I can't see any point to log this any more than unsuccesful login attempts
>using APOP, all you see there is the scrambled password. If this is in the
>log I as an admin can see someones supposedly secret password by misstake. I
>don't want that, I want to be able t tell people that I really don't know
>their password. They might very well be using the same password for other
>services (most people probably do). This is all a small detail but evenso...
>
>Regards,
>Jonas Lundberg
>
Hi again,
I actually see this as a good way to identify login attempts to an
account using an invalid password. Earlier this year, I had a client using
my server with some very important corporate data they wanted kept secure
by email (hence use the Mac based server as it's nice & secure) Someone
attempted to access the account using quite a number of different password
attempts, all from the same IP address. As a result of this, I was able to
do a lookup & provide the client with the network (actually within their
organisation) & the person was suspended. This, I think is a very useful
feature.
Bye for now, Terry Allen
___________________________________________________________________
hEARd
Postal Address:
hEARd
c/o 128 The Entrance Rd
The Entrance
NSW 2261
Australia
Internet -
WWW:
http://heard.com.au or http://www.ozemail.com.au/~hmag
http://hosting.heard.com.au
Interactive Message Board - http://heard.com.au/wwwboard/
EMAIL: (checked every Thursday & Sunday, sometimes more often)
[EMAIL PROTECTED]
----------------------------------
Non profit promotion for new music
----------------------------------
Also, check out the Educate site - http://www.educate.net.au
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
